Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 06:12

General

  • Target

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe

  • Size

    6.2MB

  • MD5

    0371424029fe6c4528d7fcda6b0eb7d9

  • SHA1

    3d035f63336b1dbc2323da79990b4e9ec13bdad2

  • SHA256

    a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18

  • SHA512

    24b2685ccd9c32e5a57dfcd533725118105adda7a57f8d50ebc5e3c50361d925b0745f0b7f315ce9ade3591d4a6aaaa028830c51e3b809c73641971c60c398dd

  • SSDEEP

    98304:TwdXBZ2/5fbjORDfIOXo55uwHruHhuDloKdzOJDb4v+2h:ikALY5zruHmJwN0v+

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe
    "C:\Users\Admin\AppData\Local\Temp\a2f2612da731822b703dd2ef6d6ac60c6b9929762ddddd8ae02f994e45607b18.exe"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    1KB

    MD5

    b5605da7597c1346cd4ccb6b6a4e03ef

    SHA1

    66a721cd0bc6eafbbe455f9957fcf5f8042be6f6

    SHA256

    e75f994d2040c6842d574d36f9417fa985982536fa11f4ce8372dfb34f0ce999

    SHA512

    324c44bdae51bebaad0ed19ef9f32b3655debd62c212a712c39fecd243b5f3035d3df8a372f09784ce22786f694362d874eb8be932a65849d2e1f9fc9eaf8489

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    3KB

    MD5

    46c6fab276cc8f28d1d55be3119d206f

    SHA1

    03ee5f72175c81fa3cfcf3cbe5bcacbd89aafc43

    SHA256

    86d0c0bfc6f9631b8ee91b793159a3efe8a25c45bacca9a19558e4f1a047c47d

    SHA512

    aed2c380d84f3729a0295fd1f103e184d48932ce84353aec229907c587d2fd1340303809952b574fdc9fe83d6521dcec60f34800278c775aeb7744d112204dee

  • C:\Users\Admin\AppData\Local\Temp\lite_installer.log

    Filesize

    7KB

    MD5

    3086d40b91b3c22c9d1db74c7d1fce95

    SHA1

    8d76fa6d6d8c99649ea2633ba24da682c2078653

    SHA256

    81f9272b09cb8ac1e1a222f3639086331549c64b12ef0064e6b605ae5cbfa894

    SHA512

    16c43f1d2f4fe022393456d422815b598c8dacc4c97a637a86c08db97cf4bd563064f8a29953f12a3fe843a74d8b818bec7cf6ee922b4229b751a385fe8ae28e

  • C:\Users\Admin\AppData\Roaming\Yandex\ui

    Filesize

    38B

    MD5

    ed7fe9f4400e382dbd47c1d1f4dd0899

    SHA1

    93057ee0202e9622df2cc781e39c607b0076723a

    SHA256

    b845af4c62cd5c79678a8087ac3d916c7f298f99e48d0fd524d42b6617416e09

    SHA512

    c7b72e066595b2c734c7852be785fcd07c910c307b4d3d905eb0bb0dd159735119908110aa75799662f79523a2e19fba0a8d16e32ade5d6ac17ce7fd18ea1541